KR102475738B1 - Server that supports secure access of user terminal device and controlling method thereof - Google Patents

Abstract

The present invention provides a server and a method of supporting access of a user terminal device in a secure environment thereof, which allow a user to perform various jobs in a secure environment when the user remotely performs jobs. The method in which a server supports access of a user terminal device in a secure environment comprises: a step of checking unique identification information of the user terminal device and a security condition if an access request for the server or resources associated therewith through a secure container is present from the user terminal device, wherein the user terminal device is logically separated into (i) the secure container for communicating with the server under a prescribed security condition required by the server and (ii) a non-secure container for communicating with different servers in a vulnerable situation in comparison to the security condition; a step of determining whether the security condition is satisfied and the unique identification information corresponds to preregistered information; and a step of refusing or supporting to refuse the access request of the user terminal device if it is determined that the security condition is not satisfied or the unique identification information does not correspond to the preregistered information.

Description

A method for supporting access of a user terminal device in a server and its security environment {SERVER THAT SUPPORTS SECURE ACCESS OF USER TERMINAL DEVICE AND CONTROLLING METHOD THEREOF}

The present disclosure relates to a server and a method for supporting access of a user terminal device in a secure environment thereof, and more particularly, to a server and security thereof that support a user terminal device to access a work server within an internal network through a secure container. A method for supporting access of a user terminal device in an environment.

In recent years, with the spread of infectious diseases and the development of communication technology, remote work (or home work) regardless of work place is increasing. However, when a user (ie, worker) performs work through remote work, high security is required because it is necessary to remotely access the work server of the company network.

Meanwhile, a user terminal device used by a user for remote work may be used not only for work but also for the user's personal use. In order to access a business server with a personal terminal device, various security requirements must be met, and this is generally provided as a security solution such as MDM (Mobile Device Management). However, these security solutions limit the functions of terminal devices for personal use, such as the Internet and cameras, and have a risk of collecting personal information, which has acted as a hurdle to the spread of terminal devices for remote work.

Accordingly, there is a demand for a technical method capable of freely using one user terminal device used by a worker for personal use while satisfying security requirements required for company work.

An object of the present disclosure is to provide a server for enabling a user terminal device to access a security server or a related work server in a secure environment, and a method for supporting access of the user terminal device in a secure environment.

According to an embodiment of the present disclosure, a method in which a server supports access of a user terminal device in a secure environment includes the user terminal device - (i) security for communicating with the server under a predetermined security condition required by the server. Logically separated into a container and (ii) a non-secure container for communicating with other servers in a vulnerable situation compared to the security condition - When there is a request for access to the server or resources related thereto through the secure container, the security condition and checking unique identification information of the user terminal device. determining whether the security condition is satisfied and the unique identification information corresponds to pre-registered information; and if it is determined that the security condition is not satisfied or the unique identification information does not correspond to pre-registered information, rejecting or supporting the rejection of the access request of the user terminal device.

In addition, when there is a container separation request from the user terminal device, the server checks the unique identification information to authenticate or support authentication of the user terminal device, and transmits predetermined security environment information required by the server to the server. Container separation of the user terminal device may be supported so that the communication environment of the secure container satisfies the predetermined security condition by providing or providing support to the authenticated user terminal device.

The method may further include remotely installing or supporting the installation of an application authorized to use the user terminal device in the secure container; determining whether installation is permitted when an installation request for an application not installed in the secure container is received from the user terminal device; and remotely installing or supporting the installation of an application not installed in the secure container if the installation is allowed.

Further, in the method, when an e-mail request is received through the secure container of the user terminal device, an external mail server sends the body of the mail and attached documents stored in the mailbox of the user mapped to the user terminal device. The method may further include supporting a user to check mail in the secure container by transmitting or supporting transmission to a secure mail server accessible from the secure container or to a secure container of the user terminal device.

In addition, the unique identification information may include at least a part of device code information assigned at the time of manufacturing the user terminal device, phone number of the user terminal device, and mobile communication chip information.

The method may further include determining whether or not there is a request for a virtual machine resource from a secure container of the user terminal device through a virtual private network (VPN) or supporting the determination; When the virtual machine allocation and usage authority for the user of the user terminal device is authenticated, the virtual machine access through the secure container is allowed or supported, and after the virtual machine access is allowed, a VPN (Virtual Private Network) controlling the user terminal device to block a session connection between the user terminal device and the virtual machine server or issue a security warning in the user terminal device when a request for virtual machine communication through a network with weak security is confirmed; can include

The method may further include checking access authority of the user terminal device when the user terminal device accesses a document sharing server for document collaboration through the secure container; The method may include allowing or allowing the user terminal device to access the document sharing server when the user terminal device has permission to access the document sharing server.

In the method, the user terminal device obtains GPS information about a location close to the user terminal device from an artificial satellite, and obtains GPS correction information for accurately calculating the location of the user terminal device from an external server. identifying whether the user of the user terminal device is in the allowed location based on the actual location information of the user terminal device when the actual location of the user terminal device is calculated based on the GPS information and the GPS correction information; ; can include

Further, the method may block access of the user terminal device or block the user terminal device when communication with the server through the secure container is detected while the user is out of the permitted location, or the user of the user terminal device is allowed. It may include a step of supporting a guidance message guiding to perform a task at the location to be provided through the user terminal device.

In addition, when a request for importing external data obtained through a non-secure container of the user terminal device is received, the method supports storing or storing the external data in a cloud server, and provides summary information on the external data Transmitting to a terminal device of a person having permission to bring in; if the request for importing the external data is approved by the terminal device of the person having the authority to approve the import, supporting to view the external data through the secure container by supporting the import or import of the requested external data into an internal network; Including, it is possible to determine whether or not to determine whether the requested external data includes malicious code.

Meanwhile, according to an embodiment of the present disclosure, a server supporting communication of a user terminal device in a secure environment includes a communication unit configured to communicate with the user terminal device; storage unit; and the user terminal device - (i) a secure container for communicating with the server under a predetermined security condition required by the server and (ii) a non-secure container for communicating with another server under a situation vulnerable to the security condition. Separated by - When there is a request for access to the server or a resource related thereto through the secure container from , the security condition and unique identification information of the user terminal device are checked, the security condition is satisfied, and the unique identification information determines whether or not corresponds to pre-registered information, and if the security condition is not satisfied or it is determined that the unique identification information does not correspond to pre-registered information, rejecting or rejecting the access request of the user terminal device It includes; a control unit to do.

In addition, when there is a container separation request from the user terminal device, the control unit checks the unique identification information to authenticate or support authentication of the user terminal device, and transmit predetermined security environment information required by the server to the server. Container separation of the user terminal device may be supported so that the communication environment of the secure container satisfies the predetermined security condition by providing or providing support to the authenticated user terminal device.

In addition, the control unit may remotely install or support the installation of an application for which the use right of the user terminal device is recognized in the secure container, and receive an installation request for an application not installed in the secure container from the user terminal device. , it is determined whether the installation is permitted, and if the installation is permitted, an application not installed in the secure container may be remotely installed or supported to be installed.

Further, the control unit, when an e-mail request is received through the secure container of the user terminal device through the communication unit, the body of the mail stored in the mailbox of the user mapped with the user terminal device by an external mail server. and sending or supporting attachments to a secure mail server accessible from the secure container or to a secure container of the user terminal device, so that the user's mail can be checked in the secure container.

In addition, the unique identification information may include at least a part of device code information assigned at the time of manufacturing the user terminal device, phone number of the user terminal device, and mobile communication chip information.

The control unit determines or supports to determine whether there is a request for a virtual machine resource from a secure container of the user terminal device through a virtual private network (VPN), and assigns a virtual machine to a user of the user terminal device and grants permission to use the virtual machine. If this is authenticated, the virtual machine access through the secure container is allowed or supported, and after the virtual machine access is allowed, if a virtual machine communication request through a network less secure than a VPN (Virtual Private Network) is confirmed, A session connection between the user terminal device and the virtual machine server may be disconnected or the user terminal device may control the user terminal device to issue a security warning.

In addition, when the user terminal device accesses a document sharing server for document collaboration through the secure container, the control unit checks the access authority of the user terminal device and allows the user terminal device to access the document sharing server. When the access authority is confirmed, the user terminal device may be allowed to access the document sharing server or supported to be allowed.

The control unit obtains GPS information about a location close to the user terminal device from an artificial satellite by the user terminal device and obtains GPS correction information for calculating an accurate location of the user terminal device from an external server, When the actual location of the user terminal device is calculated based on the GPS information and the GPS correction information, it is possible to identify whether the user of the user terminal device is in an allowed location based on the actual location information of the user terminal device. .

In addition, the control unit blocks the access of the user terminal device or blocks the user terminal device when communication with the server through the security container is detected while the user is out of the permitted location, or the user of the user terminal device allows the permission. A guide message for guiding work to be performed at the selected location may be provided through the user terminal device.

The control unit, when receiving a request for bringing in external data obtained through a non-secure container of the user terminal device, stores or supports storage of the external data in a cloud server, and provides summary information on the external data By controlling the communication unit to transmit data to a terminal device of a person having the right to bring in, and when a request for carrying in the external data is approved from the terminal device of the person having the right to bring in, the requested external material is brought into the internal network or supported to be brought in. External data can be viewed through a secure container, and it can be determined whether or not the requested external data includes malicious code.

As described above, according to various embodiments of the present disclosure, a user can divide and use one user terminal device for personal use and work, and also perform various tasks in a secure environment when the user performs work through remote work. You can do it.

1 illustrates a system for providing a secure environment, according to one embodiment of the present disclosure;
2 is a diagram showing the configuration of a server according to an embodiment of the present disclosure;
3 is a diagram illustrating a software structure of a user terminal device according to an embodiment of the present disclosure;
4 is a sequence diagram for explaining a method for a server to separate a container of a user terminal device according to an embodiment of the present disclosure;
5 is a flowchart for explaining a method in which a server supports access of a user terminal device in a secure environment according to an embodiment of the present disclosure;
6A is a diagram illustrating an embodiment of accessing a work server inside a corporate network via a virtual machine in a public cloud according to an embodiment of the present disclosure;
6B is a diagram illustrating an embodiment of accessing a work server inside a company network via a virtual machine in a private cloud of the company network according to an embodiment of the present disclosure;
7 is a sequence diagram for explaining a method for a server to identify a location of a user terminal device according to an embodiment of the present disclosure; and
8 is a diagram illustrating a guide message provided when a user terminal device moves out of an allowed location according to an embodiment of the present disclosure.

Since the present embodiments can apply various transformations and have various embodiments, specific embodiments will be illustrated in the drawings and described in detail in the detailed description. However, this is not intended to limit the scope to the specific embodiments, and should be understood to include various modifications, equivalents, and/or alternatives of the embodiments of the present disclosure. In connection with the description of the drawings, like reference numerals may be used for like elements.

In describing the present disclosure, if it is determined that a detailed description of a related known function or configuration may unnecessarily obscure the gist of the present disclosure, a detailed description thereof will be omitted.

In addition, the following embodiments may be modified in many different forms, and the scope of the technical idea of the present disclosure is not limited to the following embodiments. Rather, these embodiments are provided so that this disclosure will be thorough and complete, and will fully convey the spirit of the disclosure to those skilled in the art.

Terms used in this disclosure are only used to describe specific embodiments, and are not intended to limit the scope of rights. Singular expressions include plural expressions unless the context clearly dictates otherwise.

In the present disclosure, expressions such as “has,” “can have,” “includes,” or “can include” indicate the presence of a corresponding feature (eg, numerical value, function, operation, or component such as a part). , which does not preclude the existence of additional features.

In this disclosure, expressions such as “A or B,” “at least one of A and/and B,” or “one or more of A or/and B” may include all possible combinations of the items listed together. . For example, “A or B,” “at least one of A and B,” or “at least one of A or B” (1) includes at least one A, (2) includes at least one B, Or (3) may refer to all cases including at least one A and at least one B.

Expressions such as "first," "second," "first," or "second," used in the present disclosure may modify various elements regardless of order and/or importance, and may refer to one element as It is used only to distinguish it from other components and does not limit the corresponding components.

A component (e.g., a first component) is "(operatively or communicatively) coupled with/to" another component (e.g., a second component); When referred to as "connected to", it should be understood that the certain component may be directly connected to the other component or connected through another component (eg, a third component).

On the other hand, when an element (eg, a first element) is referred to as being “directly connected” or “directly connected” to another element (eg, a second element), the element and the above It may be understood that other components (eg, a third component) do not exist between the other components.

The expression “configured to (or configured to)” as used in this disclosure means, depending on the situation, for example, “suitable for,” “having the capacity to.” ," "designed to," "adapted to," "made to," or "capable of." The term "configured (or set) to" may not necessarily mean only "specifically designed to" hardware.

Instead, in some contexts, the phrase "device configured to" may mean that the device is "capable of" in conjunction with other devices or components. For example, the phrase "a control unit configured (or configured) to perform A, B, and C" may include a dedicated control unit (e.g., an embedded control unit) for performing the operation, or executing one or more software programs stored on a storage device. By doing so, it may mean a general-purpose processor (eg, CPU or application processor) capable of performing corresponding operations.

In an embodiment, a 'module' or 'unit' performs at least one function or operation, and may be implemented with hardware or software, or a combination of hardware and software. In addition, a plurality of 'modules' or a plurality of 'units' may be integrated into at least one module and implemented as at least one server, except for 'modules' or 'units' that need to be implemented with specific hardware.

In an embodiment, supporting a specific operation by the server 100 may mean that the server 100 transmits a control command or related information to an external device to perform an operation through the external device.

Meanwhile, various elements and areas in the drawings are schematically drawn. Therefore, the technical spirit of the present invention is not limited by the relative size or spacing drawn in the accompanying drawings.

Hereinafter, the present invention will be described in more detail with reference to the drawings. 1 is a diagram illustrating a system for providing a secure environment according to an embodiment of the present disclosure. As shown in FIG. 1 , a system for providing a secure environment may include a user terminal device 10 , a server 100 , and a work server 20 . In this case, the user terminal device 10 may be a tablet PC, but this is merely an example, and may be implemented with various user terminal devices such as a smart phone, a desktop PC, and a notebook PC. In addition, since the server 100 supports the user terminal device 10 to access the server 100 or the work server 20 related to the server 100 in a secure environment, it may be named a security server.

The user terminal device 10 may transmit a container separation request to the server 100 in order to perform tasks in a secure environment. That is, the user terminal device 10 includes a secure container capable of accessing the server 100 or the work server 20 under a predetermined security condition required by the server and a container for communicating with another server under a vulnerable situation compared to the security condition. You can send a request to logically separate into a non-secure container. At this time, the user terminal device 10 may transmit unique identification information of the user terminal device 10 together with the container separation request. The unique identification information may include at least some of device code information assigned at the time of manufacturing the user terminal device 10 , phone number of the user terminal device 10 , and mobile communication chip information.

The server 100 may verify the unique identification information of the user terminal device 10 to authenticate the user terminal device 10 or provide information to another authentication device (not shown) to support authentication. That is, the server 100 compares the unique identification information of the user terminal device 10 with pre-registered identification information to allow the user terminal device 10 to access the server 100 or the work server 20. You can authenticate whether or not you are aware of it.

If the user terminal device 10 is authenticated as a user terminal device capable of accessing the server 100 or the work server 20, the server 100 transmits or supports the transmission of security environment information to the user terminal device 10. can Security environment information includes network information (which can include VPN, multi-factor authentication, vaccine information, security update information, emergency access information, etc.), security solution information (update information, Antivirus, DLP, DRM, etc. can be included), e-mail security information (can include text check, VPN, encrypted communication, multi-factor authentication, etc.), user authentication information (can include integrated authentication, access history and tracking, multi-factor authentication, etc.) ), password security information (can include password rules, account password, browser security, etc.), etc. In addition, the security environment information may further include information on security conditions required by financial authorities.

In addition, when the user terminal device 10 logically separates a secure container and a non-secure container, the server 100 remotely installs or installs an application for which the use right of the user terminal device 10 is recognized in the secure container. can support you to do it. For example, the server 100 may directly access the secure container of the user terminal device 10 to remotely install or support the installation of applications for which usage rights have been recognized. Alternatively, the server 100 may support the installation of the application by allowing the user to download an application for which usage rights have been recognized through a secure container of the user terminal device 10 .

After being logically separated into a secure container and a non-secure container, the user terminal device 10, while operating in the work mode, uses the server 100 or a resource related to the server 100 (for example, a work server ( 20)) may transmit a request for access.

The server 100 may check the security condition of the user terminal device 10 that has transmitted the access request through the secure container and unique identification information of the user terminal device 10 . The server 100 may determine whether a security condition is satisfied and unique identification information corresponds to pre-registered information. When it is determined that the security conditions are satisfied and the unique identification information corresponds to pre-registered information, the server 100 may allow or support access to the server 100 or resources related to the server 100 according to the access request, , When it is determined that the security condition is not satisfied or the unique identification information does not correspond to pre-registered information, the server 100 may reject or reject the access request of the user terminal device 10.

After the user terminal device 10 is connected to the server 100 or the work server 20, the server 100 or the work server 20 supports the user terminal device 10 to perform work in a secure environment. can As an embodiment, the server 100 may support installation of applications that are not installed in a secure container of the user terminal device 10 . As another embodiment, the server 100 may receive mail from an external mail server and provide it to the user terminal device 10 . In another embodiment, the server 100 may support access to virtual machine resources through an encrypted network (eg, Virtual Private Network (VNP)) by using a secure container for the user terminal device 10. Another embodiment In this way, the server 100 may support the user terminal device 10 to access a document sharing server for document collaboration in a work system through a secure container.In another embodiment, the server 100 When the user terminal device 10 accesses through the secure container, it may determine whether the user terminal device 10 is performing work at work by checking the location information of the user terminal device 10. As another example, the server 100 may determine whether the user terminal device 100 is performing a task. External data obtained through the non-secure container of (10) can be supported to be viewed through the secure container.

Meanwhile, in the above-described embodiment, the server 100 and the business server 20 have been described as being implemented as one, respectively, but this is only one embodiment, and each may be implemented as a plurality of servers. In addition, the server 100 and the work server 20 are not physically separated and may be implemented as one server. In addition, in addition to the server 100 and the business server 20, a virtual machine server for allowing the user terminal device 10 to access the virtual machine may be further included.

2 is a diagram illustrating a configuration of a server according to an embodiment of the present disclosure. As shown in FIG. 2 , the server 100 may include a communication unit 110 , a storage unit 120 , and a control unit 130 . However, this is only one embodiment, and the server 100 may further include other components such as a display in addition to the communication unit 110, the storage unit 120, and the control unit 130, of course.

The communication unit 110 includes a circuit and can communicate with an external device. Specifically, the controller 130 may receive various data or information from an external device connected through the communication unit 110 and may transmit various data or information to the external device.

The communication unit 110 may include at least one of a WiFi module and a wireless communication module. Specifically, the WiFi module may perform communication in a WiFi method. In the case of using the WiFi module, various connection information such as SSID is first transmitted and received, and various information can be transmitted and received after communication is connected using this. In addition, the wireless communication module may perform communication according to various communication standards such as IEEE, Zigbee, 3rd Generation (3G), 3rd Generation Partnership Project (3GPP), Long Term Evolution (LTE), and 5th Generation (5G).

Meanwhile, the communication unit 100 may communicate with the user terminal device 10 or the work server 20 using an encrypted network (eg, VPN).

The storage unit 120 may store various instructions for controlling overall operations of the server 100 . In particular, the storage unit 120 may store unique identification information for the user terminal device 10 capable of accessing the server 100 or related resources. In addition, the storage unit 120 may store security environment information including security conditions that the user terminal device 10 can access in the security environment.

The control unit 130 may control the operation of the server 100 according to various instructions stored in the storage unit 120 . In particular, the controller 130 may support access of the user terminal device 10 in a secure environment.

Hereinafter, various embodiments in which the server 100 supports access of the user terminal device 10 in a secure environment will be described with reference to FIGS. 3 to 8 .

3 is a sequence diagram illustrating a method for separating a container of a user terminal device by a server according to an embodiment of the present disclosure.

First, the user terminal device 10 may receive a container separation request (S310). At this time, the container separation request may be received after first connecting to the server 100 and logging in to the server 100 . Alternatively, when logging in to the server 100, a container separation request may be automatically input to the user terminal device 10.

The user terminal device 10 may transmit a container separation request and unique identification information (S320).

Then, the server 100 may authenticate the user terminal device 10 based on the unique identification information (S330). Specifically, when there is a container separation request from the user terminal device 10, the server 100 may verify the unique identification information received from the user terminal device 10 to authenticate the user terminal device 10 or support authentication. have. The storage unit 120 of the server 100 may pre-store unique identification information about the user terminal device 10 corresponding to the user of the company. At this time, the unique identification information is not simply MAC address or IP address, but device code information given at the time of manufacturing the user terminal device 10, phone number of the user terminal device 10, and mobile communication chip information (eg, USIM chip information). may contain at least some of them. That is, communication information such as a phone number and a mobile communication chip of the user terminal device 10 and device code information assigned during manufacture of the user terminal device 10 are stored together to store not only the user but also the user terminal device 10 corresponding to the user. ) can be authenticated. As a result, when a user uses a certain user terminal device 10, since the security of the user terminal device 10 cannot be checked from the point of view of the company, security is highly likely to be vulnerable, but the user terminal device designated by the company By using (10), security can be further strengthened.

When the user terminal device 10 is authenticated, the server 100 may provide or support to provide predetermined security environment information requested by the server 100 to the authenticated user terminal device 10 (S340). In this case, the security environment information may include network information (for example, information on an encrypted network (SSL-VPN), etc.) that allows the communication environment of the secure container to satisfy a predetermined security condition. In addition, the security environment information may further include information on security conditions to be met by the user terminal device 10 that can be used by financial institutions requested by financial authorities. For example, the user terminal device 10 may require the following security conditions.

1. Take measures to prevent unauthorized operation of the terminal by a person other than the person in charge

2. To maintain records that can confirm whether or not the terminal accessing the information processing system is a legitimate user;

3. Designate important terminals to which strengthened protection measures are applied, such as prohibition of external export, Internet access, and groupware access.

4. Control access to auxiliary storage media and portable computer equipment from terminals to prevent information leakage and infection with malicious codes.

The user terminal device 10 may separate containers based on security environment information (S350). Specifically, the user terminal device 10 provides (i) a secure container for communication with the server 100 under a predetermined security condition required by the server 100 and (ii) a security condition compared to the security environment information. It can be separated into non-secure containers to communicate with other servers in vulnerable situations. That is, the server 100 may support container separation of the user terminal device 10 so that the communication environment of the secure container satisfies a predetermined security condition.

In addition, when the user terminal device 10 is authenticated, the server 100 may remotely install or support the installation of an application for which the use authority of the user terminal device 10 is recognized in a secure container of the user terminal device 10. . That is, the control unit 130 may remotely install or support the installation of applications for which use rights have been recognized that can be used for work.

The user terminal device 10 divided into a secure container and a non-secure container will be described in more detail with reference to FIG. 4 .

A container is a package of an application and data for executing the application (eg, code, library, environment variable, configuration file, etc.), and as shown in FIG. 3, non-secure containers 410 and 420 and secure containers ( 430) can be separated. The non-secure containers 410 and 420 are containers that package an image that can be executed over the general Internet (eg, application A and its Bins, Libs data, etc.), and are vulnerable to security conditions required by secure containers. It can be connected to other servers (eg, non-secure servers), and the secure container 430 is a packaged image (eg, application C and corresponding Bins, Libs data, etc.) that can be executed through an encrypted network, and the server ( 100) or a resource related thereto (eg, a cloud server including a virtual machine resource or a work server 20, etc.).

The non-secure containers 410 and 420 and the secure container 430 are launched by executing an image (a package including data necessary for running an application), and may share a host kernel.

In addition, the user terminal device 10 may provide a personal mode for personal use and a work mode for work. The screen of the user terminal device 10 may include a UI (eg, icon) for entering the personal mode and work mode, and the first UI (icon) corresponding to the personal mode included in the screen and corresponding to the work mode When one of the second UIs (icons) is selected, the user terminal device 10 may operate in a mode corresponding to the selected UI. When the personal mode is selected, the user terminal device 10 may access a general server (non-secure server) through the non-secure containers 310 and 320 . When the work mode is selected, the user terminal device 10 may access the security server 100 through the security container 330 . In particular, when the work mode is selected, the user terminal device 10 can access the security server 100 using an encrypted network (eg, SSL VPN, etc.).

A method for the server 100 to support access of the user terminal device 10 in a secure environment while the user terminal device 10 operates in the work mode will be described with reference to FIG. 5 . FIG. 5 is a flowchart for explaining a method in which the server 100 supports access of the user terminal device 10 in a secure environment according to an embodiment of the present disclosure.

The server 100 may receive an access request from the user terminal device 10 (S510). At this time, when a user command for operating in the work mode or executing an application (eg, application C) of a secure container is input to the user terminal device 10, the server 100 receives an access request from the user terminal device 10. can do.

The server 100 may check security conditions and unique identification information of the user terminal device 10 (S520).

The server 100 may determine whether the security conditions are satisfied (S520). That is, the server 100 may determine whether the user terminal device 10 has accessed through an encrypted network or meets security conditions required by financial authorities.

If the security condition is satisfied (S530-Y), the server 100 may determine whether the unique identification information is pre-registered information (S540). That is, the server 100 may determine whether pre-registered information corresponding to the unique identification information received from the user terminal device 10 exists.

If the unique identification information is pre-registered information (S540-Y), the server 100 may permit access of the user terminal device 10 (S550).

However, if the security conditions are not satisfied (S530-N) or the educational identification information is not pre-registered information (S540-N), the server 100 may reject the access of the user terminal device 10 (S560). ). At this time, the server 100 may transmit a message including information about the reason for rejecting the access (eg, security condition dissatisfaction, unique identification information not authenticated, etc.) to the user terminal device 10, and the user terminal device 10 ) may provide a message to the user.

As described above, by verifying security conditions and unique identification information to authenticate the user terminal device 10, the server 100 allows the user terminal device 10 to access the server 100 or related resources in a secure environment. can support you

Meanwhile, in FIG. 5 , it has been described that step S530 is performed before step S540, but this is only one embodiment, and step S540 may be performed before step S530, and steps S530 and S540 may be performed in parallel. have.

In addition, the server 100 may remotely install, delete, or manage applications required for work. That is, the server 100 may support the user terminal device 10 to access the server 100 in a secure environment by separating applications necessary for work (ie, applications registered in the server 100) into secure containers. . However, the user needs to execute a specific application not registered in the server 100 in the work mode according to the nature of the work. Accordingly, the user may request an installation from the manager through the app store.

Specifically, an icon corresponding to an app store may be displayed on the screen of the user terminal device 10 . In this case, the icon corresponding to the app store may be an icon displayed in the work mode, but this is only an example and may be an icon displayed in the personal mode. When the user selects an icon corresponding to an app store, the user terminal device 10 may provide a list including a plurality of applications. In particular, when an installation request is input by selecting a first application not installed in the secure container among a plurality of applications, the user terminal device 10 sends an installation request for the first application not installed in the secure container to the server 100. can transmit

The server 100 may determine whether to allow installation of the first application. In this case, when the first application is an application registered in the server, the server 100 may install or support installation of the first application in the user terminal device 10 . If the first application is an application that is not registered in the server, the server 100 may transmit a message inquiring whether to allow installation of the first application to the terminal device of the manager. When a message permitting installation to the administrator's terminal device is received, the server 100 may install or support installation of the first application on the user terminal device 10, but a message disallowing installation to the administrator's terminal device is received. If so, the server 100 may transmit a guide message indicating that the first application cannot be installed to the user terminal device 10 . At this time, the user terminal device 10 may display a guide message indicating that the first application cannot be installed.

In addition, the server 100 may provide the user terminal device 10 with mail received from an external mail server through a secure container. Specifically, when an e-mail request is received through the secure container of the user terminal device 10, the server 100 transmits mail stored in the mailbox of the user mapped to the user terminal device 10 by an external mail server. The main body and attached documents may be transmitted or supported to be transmitted to a secure mail server accessible from the secure container or to a secure container of the user terminal device 10 . Accordingly, the server 100 may support a user to check mail in an application of a secure container.

At this time, when a mail request is received through the secure container of the user terminal device 10, the external mail server determines spam mail among the mail received by itself, and mails excluding spam mail to the secure mail server or the user terminal device ( 10) can be sent.

In addition, the secure container may access the business server 30 of the company network through an encrypted network (eg, Virtual Private Network (VPN), etc.). In this case, the user terminal device 10 may access the virtual machine through a secure network (eg, SSL VPN (Secure Sockets Layer Virtual Private Network) or IPSec VPN (Internet Protocol Security Virtual Private Network)) in the secure container. In this case, the server 100 may determine whether the security container of the user terminal device satisfies the security condition and support the user terminal device 10 to access the assigned virtual machine (ie, cloud server).

Specifically, the server 100 may determine or support determination of whether there is a virtual machine resource request from the secure container of the user terminal device 10 through VPN. When the virtual machine allocation and usage authority for the user of the user terminal device 10 is authenticated, the server 100 may allow or support access to the virtual machine through the secure container. In this case, the right to use may be authenticated with unique identification information, but this is only one embodiment, and may be authenticated with other identification information (eg, ID, password, etc.).

Accordingly, the user terminal device 10 may perform communication with the work server 20 of the company network after accessing the virtual machine. Meanwhile, as shown in FIG. 6A, the user terminal device 10 may access the virtual machine 30 of the public cloud and then communicate with the work server 20 of the company network, but this is only an example. , After accessing the virtual machine 30 of the private cloud inside the company network, it is possible to perform communication with the work server 20 of the company network. Specifically, as shown in FIG. 6B, the user terminal device 10 may perform communication with the work server 20 of the company network after accessing the virtual machine 30 of the public network in the company network. After accessing the virtual machine 30 of the internal work network in the network, it is possible to perform communication with the work server 20 of the company network.

However, if a virtual machine communication request is confirmed through a network less secure than a VPN (Virtual Private Network) after access to the virtual machine is allowed, the server 100 establishes a session connection between the user terminal device 10 and the virtual machine server. may be blocked or the user terminal device 10 may be controlled so that a security warning is issued in the user terminal device. Specifically, after access of the user terminal device 10 through the security network is confirmed, whether the user terminal device 10 is allocated a virtual machine and usage rights are checked, and an authorization token is issued, the user terminal device In a state in which (10) communicates with the virtual machine using the authentication token, the server 100 may verify or support confirmation of a path of a packet transmitted/received between the user terminal device 10 and the virtual machine. And, as a result of checking the path of the packet, if it is determined that the transmitted/received packet is transmitted through an unsecured network, the server 100 blocks the session connection between the user terminal device 10 and the virtual machine or issues a security warning in the user terminal device. It is possible to control the user terminal device 10 to make it happen.

Also, the server 100 may support access of the user terminal device 10 to a document sharing server for document collaboration through a secure container. In this case, the document sharing server may be a server within a business system necessary to systematically manage and utilize documents necessary for business in the company without storing document files in the user terminal device 10 .

Specifically, when the user terminal device 10 accesses a document sharing server for document collaboration through a secure container, the server 100 may check the access authority of the user terminal device 10 . In particular, when the user terminal device 10 accesses a document sharing server through a virtual machine, the server 100 may check access rights upon user authentication in the virtual machine. When the user terminal device 10 directly accesses the document sharing server, the server 100 may check access rights using unique identification information of the user terminal device 10 .

When the user terminal device 10 has permission to access the document sharing server, the server 100 may allow or support allowing the user terminal device 10 having access permission to access the document sharing server. have.

At this time, the user terminal device 10 having access authority can access a predetermined area (logical area) of the document sharing server. However, when a plurality of user terminal devices access the same document file in the document sharing server, in one embodiment, only the user terminal device that accesses first has the right to edit, and other user terminal devices may have only the right to search. In another embodiment, all user terminal devices have the right to edit, but the right to edit may be granted only to the user terminal device that first accessed the document in a closed state. At this time, the access of a plurality of user terminal devices is recorded in the document sharing server or server 100 and can be viewed.

In addition, the server 100 may receive location information from the user terminal device 10 to determine whether the user terminal device 10 is in an allowed location (ie, a working location).

This will be described in detail with reference to FIG. 7 . 7 is a sequence diagram illustrating a method for a server to identify a location of a user terminal device according to an embodiment of the present disclosure.

The artificial satellite 40 may acquire GPS information about a nearby location of the user terminal device 10 (S710).

In addition, the external server 50 may acquire GPS correction information for GPS information (S720). In this case, the GPS correction information may include information such as satellite signal delay, satellite clock error, satellite orbit error, tropospheric error, ionospheric error, and multipath. In particular, the GPS information may be Observation Space Representation (OSR) information or State Space Representation (SSR) information. The OSR information is provided to the user terminal device 10 by adding all error factors of the GPS information, and the SSR information is a method in which correction information for each error factor of the GPS information is generated and provided to the user terminal device 10 . In particular, SSR information may be more cost-effective than OSR information.

The artificial satellite 40 may transmit GPS information to the user terminal device 10 (S730), and the external server 50 may transmit GPS correction information to the user terminal device 10 (S740).

Then, the user terminal device 10 may obtain real location information of the user terminal device 10 based on the acquired GPS information and GPS correction information (S750).

The user terminal device 10 may transmit the acquired real location information to the server 100 (S760). Meanwhile, the user terminal device 10 may transmit acquired real location information to the server 100 while operating in the work mode. That is, when accessing the server 100 through the secure container, the user terminal device 10 may transmit real location information.

Meanwhile, the actual location information may be calculated in the server 100 . That is, after obtaining GPS information on a location close to the user terminal device from a satellite by the user terminal device and obtaining GPS correction information for calculating an accurate position of the user terminal device from an external server, the GPS information and GPS correction are obtained. The information is transmitted to the server 100, and the server 100 can calculate real location information based on these information.

The server 100 may identify whether the user of the user terminal device 10 is in a permitted location based on the actual location information (S770).

When communication with the server 100 through the secure container is detected while the user is out of the permitted location, the server 100 blocks the access of the user terminal device 10 or the user of the user terminal device 10 A guide message for guiding work to be performed at a designated location may be provided through the user terminal device 10 . For example, if it is determined that the user terminal device 10 is out of the work area, as shown in FIG. 8 , the user terminal device 10 may provide a guide message 810 saying “Please move to the work area”. .

In particular, if the server 100 first provides a guide message 810 requesting the user to work in the designated work area and protect security, and then does not return to the designated work location even after a predetermined time elapses or multiple notifications, A communication connection can be forcibly cut off. In addition, the server 100 may store the user's actual location information in the time and attendance record without separately blocking access or providing a guide message.

In addition, the server 100 may support the user terminal device 10 to import data obtained through a non-secure container into an internal network under administrator approval.

Specifically, when a request for bringing in external data acquired through a non-secure container of the user terminal device 10 is received, the server 100 may store or support storage of the external data in the cloud server, The summary information may be transmitted to the terminal device of the person having the authority to approve the import. In particular, a separate application or channel for requesting data import may exist in the work container of the user terminal device 10, and the user terminal device 10 may have a separate application or channel in a situation where security requirements such as a security network are satisfied. A request for importing external data can be received from the user through .

When a request for bringing in external data is approved from the terminal device of the person having the right to bring in, the server 100 supports bringing the requested external data into the internal network or importing the external data through the secure container of the user terminal device 10. You can support it so that it can be read. In this case, the server 100 may determine whether the external data requested to be brought in includes malicious code or support to determine whether the external data requested to be brought in from the internal network includes malicious code.

Meanwhile, methods according to various embodiments of the present disclosure may be stored in a storage medium. The device-readable storage medium may be provided in the form of a non-transitory storage medium. Here, 'non-temporary storage medium' only means that it is a tangible device and does not contain signals (e.g., electromagnetic waves), and this term refers to the case where data is stored semi-permanently in the storage medium and temporary It does not discriminate if it is saved as . For example, a 'non-temporary storage medium' may include a buffer in which data is temporarily stored.

According to one embodiment, the method according to various embodiments of the present disclosure may be included in a computer program product and provided. Computer program products may be traded between sellers and buyers as commodities. A computer program product is distributed in the form of a device-readable storage medium (e.g. compact disc read only memory (CD-ROM)), or through an application store (e.g. Play Store™) or on two user devices (e.g. It can be distributed (eg downloaded or uploaded) online, directly between smartphones. In the case of online distribution, at least part of a computer program product (eg, a downloadable app) is stored on a device-readable storage medium, such as a storage unit of a manufacturer's server, an application store's server, or a relay server. It can be at least temporarily stored or temporarily created.

Each of the components (eg, modules or programs) according to various embodiments of the present disclosure as described above may be composed of a single object or a plurality of entities, and some of the sub-components described above are omitted. or other sub-elements may be further included in various embodiments. Alternatively or additionally, some components (eg, modules or programs) may be integrated into one entity and perform the same or similar functions performed by each corresponding component prior to integration.

According to various embodiments, operations performed by units, modules, programs, or other components are executed sequentially, in parallel, iteratively, or heuristically, or at least some operations are executed in a different order, or other operations are omitted. can be added

Although the preferred embodiments of the present disclosure have been shown and described above, the present disclosure is not limited to the specific embodiments described above, and is common in the art to which the disclosure pertains without departing from the gist of the present disclosure claimed in the claims. Of course, various modifications and implementations are possible by those with knowledge of, and these modifications should not be individually understood from the technical spirit or perspective of the present disclosure.

110: communication unit 120: storage unit
130: control unit

Claims (20)

A method in which a server supports access of a user terminal device in a secure environment,
The user terminal device-(i) a secure container for communicating with the server under a predetermined security condition required by the server and (ii) a non-secure container for communicating with another server under a situation vulnerable to the security condition. Detached - if there is a request for access to the server or a resource related thereto through the secure container, checking the security condition and unique identification information of the user terminal device;
determining whether the security condition is satisfied and the unique identification information corresponds to pre-registered information; and
If the security condition is not satisfied or it is determined that the unique identification information does not correspond to pre-registered information, rejecting or supporting the rejection of the access request of the user terminal device; includes,
The method,
remotely installing or supporting the installation of an application authorized to use the user terminal device in the secure container;
determining whether installation is permitted when an installation request for an application not installed in the secure container is received from the user terminal device; and
and if the installation is permitted, remotely installing or supporting the installation of an application not installed in the secure container. According to claim 1,
The server,
When there is a container separation request from the user terminal device, verifying the unique identification information to authenticate or support authentication of the user terminal device;
Container separation of the user terminal device is supported so that the communication environment of the secure container satisfies the predetermined security condition by providing or supporting to provide predetermined security environment information requested by the server to the authenticated user terminal device. Characterized in that, the method. delete According to claim 1,
The method,
When an e-mail request is received through the secure container of the user terminal device,
The external mail server transmits or supports transmission of the mail body and attached documents stored in the mailbox of the user mapped with the user terminal device to a secure mail server accessible from the secure container or to a secure container of the user terminal device. Supporting the user's mail confirmation in the secure container; further comprising a method. According to claim 1,
The unique identification information,
and at least a part of device code information assigned at the time of manufacturing the user terminal device, phone number of the user terminal device, and mobile communication chip information. According to claim 1,
The method,
determining whether there is a request for a virtual machine resource from a secure container of the user terminal device through a Virtual Private Network (VPN) or supporting the determination;
When virtual machine allocation and usage rights for the user of the user terminal device are authenticated, allow or support access to the virtual machine through the secure container;
After access to the virtual machine is allowed, if a virtual machine communication request is confirmed through a network less secure than a VPN (Virtual Private Network), the session connection between the user terminal device and the virtual machine server is blocked, or the user terminal The method further comprising controlling the user terminal device so that the device issues a security warning. According to claim 1,
The method,
checking access authority of the user terminal device when the user terminal device accesses a document sharing server for document collaboration through the secure container;
The method further comprising: permitting or supporting permission for the user terminal device to access the document sharing server when the access authority for the user terminal device to the document sharing server is confirmed. According to claim 1,
The method,
The user terminal device obtains GPS information about a location close to the user terminal device from a satellite, and obtains GPS correction information for calculating an accurate position of the user terminal device from an external server, thereby obtaining the GPS information and the GPS correction information. When the actual location of the user terminal device is calculated based on the information,
identifying whether a user of the user terminal device is in an allowed location based on actual location information of the user terminal device; A control method further comprising a. According to claim 8,
The method,
When communication with the server through the secure container is detected while the user is out of the permitted location, the user terminal device may be blocked from accessing or the user of the user terminal device may perform an operation in the permitted location. The method further comprising: supporting a guide message for guiding information to be provided through the user terminal device. According to claim 1,
The method,
When a request for importing external data acquired through a non-secure container of the user terminal device is received, the external data is stored or supported to be stored in a cloud server, and summary information on the external data is sent to the terminal device of the person who approves the import transmitting;
if the request for importing the external data is approved by the terminal device of the person having the authority to approve the import, supporting to view the external data through the secure container by supporting the import or import of the requested external data into an internal network; Including more,
A method of determining whether or not the external data requested to be brought in includes malicious code, or supporting the determination. A server supporting communication of user terminal devices in a secure environment,
a communication unit that communicates with a user terminal device;
storage unit;
The user terminal device-(i) a secure container for communicating with the server under a predetermined security condition required by the server and (ii) a non-secure container for communicating with another server under a situation vulnerable to the security condition. Separated - if there is a request for access to the server or a resource related thereto through the secure container, check the security condition and unique identification information of the user terminal device;
determining whether the security condition is satisfied and the unique identification information corresponds to pre-registered information;
and a control unit for rejecting or rejecting an access request of the user terminal device when it is determined that the security condition is not satisfied or the unique identification information does not correspond to pre-registered information,
The control unit,
remotely installing or supporting the installation of an application for which the right to use the user terminal device has been recognized in the secure container;
When an installation request for an application not installed in the secure container is received from the user terminal device, determining whether to allow the installation;
If the installation is allowed, the server characterized in that for remotely installing or supporting the installation of an application not installed in the secure container. According to claim 11,
The control unit,
When there is a container separation request from the user terminal device, verifying the unique identification information to authenticate or support authentication of the user terminal device;
Container separation of the user terminal device is supported so that the communication environment of the secure container satisfies the predetermined security condition by providing or supporting to provide predetermined security environment information requested by the server to the authenticated user terminal device. Characterized in that, the server. delete According to claim 11,
The control unit,
When an e-mail request is received through the secure container of the user terminal device through the communication unit,
The external mail server transmits or supports transmission of the mail body and attached documents stored in the mailbox of the user mapped with the user terminal device to a secure mail server accessible from the secure container or to a secure container of the user terminal device. A server that supports checking users' mail in a secure container. According to claim 11,
The unique identification information,
The server including at least a part of device code information assigned when the user terminal device was manufactured, a phone number of the user terminal device, and mobile communication chip information. According to claim 11,
The control unit,
Determining or supporting to determine whether there is a virtual machine resource request from a secure container of the user terminal device through a virtual private network (VPN),
When virtual machine allocation and usage rights for the user of the user terminal device are authenticated, allow or support access to the virtual machine through the secure container;
After access to the virtual machine is allowed, if a virtual machine communication request is confirmed through a network less secure than a VPN (Virtual Private Network), the session connection between the user terminal device and the virtual machine server is blocked, or the user terminal Characterized in that, the server controls the user terminal device so that a security warning is issued in the device. According to claim 11,
The control unit,
When the user terminal device accesses a document sharing server for document collaboration through the secure container, the access authority of the user terminal device is checked;
The server, characterized in that, when the user terminal device is authorized to access the document sharing server, allowing or allowing the user terminal device to access the document sharing server. According to claim 11,
The control unit,
The user terminal device obtains GPS information about a location close to the user terminal device from a satellite, and obtains GPS correction information for calculating an accurate position of the user terminal device from an external server, thereby obtaining the GPS information and the GPS correction information. When the actual location of the user terminal device is calculated based on the information,
Characterized in that, based on the real location information of the user terminal device to identify whether the user of the user terminal device is in an allowed location, the server. According to claim 18,
The control unit,
When communication with the server through the secure container is detected while the user is out of the permitted location, the access of the user terminal device is blocked, or the user of the user terminal device performs an operation in the permitted location. Characterized in that, the server supports so that a guide message guiding what to do is provided through the user terminal device. According to claim 11,
The control unit,
When a request for importing external data acquired through a non-secure container of the user terminal device is received, the external data is stored or supported to be stored in a cloud server, and summary information on the external data is sent to the terminal device of the person who approves the import Control the communication unit to transmit;
When a request for carrying in the external data is approved from the terminal device of the person having the right to bring in, supporting the external data to be read through the secure container by supporting the importing or importing of the requested external data into the internal network,
Characterized in that, the server determines whether or not the requested external data includes malicious code or supports determining.

Images